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[57] ABSTRACT 

A card (2) having a memory microcircuit (20) with 
access thereto under the control of a hard-wired logic 
circuit or a niicroprocessor (21) is suitable for cooperat- 
ing with a terminal (1). A memory in EPROM technol- 
ogy (or in E^PROM technology) includes value words 
(e.g., thirty-two bit words comprising twenty-five value 
bits, four bits for coding the value of each value bit, and 
a verification bit). By loading a plurality of words into 
the meory so as to set up a sequence of value units 
spread over successive powers of 2, the calculation 
means" can split up the amount of any transaction less 
than the maximum value of the card into binary form 
very simply, and then consume not more than one bit 
per value unit (optionally other than the most signifi- 
cant value unit) in respect of each transaction. 

18 Claims, 7 Drawing Sheets 
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TRANSACTION SYSTEM OF THE ELECTRONIC 
PURSE TYPE 

The invention relates to the technical field of micro- 5 
circuit (chip) cards, referred to herein more shortly as 
"card(s)". The invention relates more particularly to 
their application as means of payment. 

BACKGROUND OF THE INVENTION 

Magnetic track bank cards are already used for this 
purpose on a wide scale. The first steps have been taken 
for changing over to bank cards including microcircuils 
or chips. In cards of this type, the memory processes a 
sum of money like a number which b encoded on a 15 
plurality of bytes or memory cells, in the same way as 
an accounting operation or a check are processed. 
There is thus no simple relationship between each mem- 
ory bit and a unit of monetary value. It is therefore 
necessary to take steps to ensure that the card user and 20 
the card itself are credit-worthy. The means most com- 
monly used for this purpose is the confidential code. 
Verifying a confidential code requires a procedure 
which complicates card manipulation. 

To some extent, systematic use of a confidential code 25 
can be omitted by using so-called "prepaid" cards. In 
such cards, each memory bit possesses a monetary value 
fixed in advance. As the name specifies, the card owner 
pays for the value thereof prior to making use of it. The 
card itself is thus totally credit-worthy. And since the 30 
sums of money concerned are relatively small, there is 
no need to verify that a card holder is indeed its legiti- 
mate owner. 

Prepayment type "telephone" cards arc currently in 
use in France with public payphones. They arc easy to 35 
implement since all telephone charges can be defined as 
a number of telephone units to be paid. , 

There is a need prepaid type cards which are suitable 
for a wider range of applications than telephone cards. 
In other words there is a need for an electronic purse 40 
card or wallet card. 

One of the problems encountered is that of optimizing 
the card, given that its memory capacity is limited and 
that the number of times a card can be reloaded is also 
limited. Other factors arc involved, such as the fact that 45 
the memory is made in erasable programmable read- 
only memory (EPROM) technology, or in electrically- 
erasable programmable read-only memory (EEPROM) 
technology, also written "EEPROM". A distinction 
should also be made between cards containing a mem- 50 
ory associated with a hard-wired logic cii-cuit, generally 
on the same chip, and cards containing a memory and a 
microprocessor either on a single chip or else on two 
separate chips. 

Another point to observe is that it is necessary, in 55 
practice, to avoid the need for "giving change" during 
transactions. This means that a card needs reloading 
only when the user desires to obtain more cash (in the 
card), which operation may require verification of the 
user's credit-worthiness. 60 

An object of the present invention is to provide solu- 
tions to these problems. 

SUMMARY OF THE INVENTION 

The invention thus provides a transaction system of 
the type comprising at least one terminal and a micro- 
circuit card suitable for cooperating with the terminal. 
The card includes a permanent write memory (which is 



2 

optionally renewable EEPROM) having at least some of 
its bits associated with a corresponding value unit, said 
memory being consumable by writing. 

According to a general feature of the invention, the 
memory contains a coding zone for defining at least one 
base value from which a sequence of value units can be 
established, said value units being spaced apart at suc- 
cessive powers of 2. The memory also contains a plural- 
ity of value words each associated with one of the value 
units, and each containing a predetermined number of 
value bits each possessing a value equal to said value 
tmit. Finally the system includes calciilation means suit- 
able for splitting up a monetary amount into binary 
notation on the basis of said base value, and for issuing 
commands to write or not to write a value bit in each of 
said value words as a function of the bit of correspond- 
ing significance in said binary notation, with the remain- 
ing more significant bits serving, where appropriate, for 
writing in the most significant value word. 

The Applicant has observed that statistically speak- 
ing, splitting up a monetary amount into binary notation 
gives, on average, as many zeroes as ones. Conse- 
quently, a card constituted as defined above should 
make it possible, on average, to perform a number of 
transactions equal to twice said predetermined number 
of value bits possessed by each value word. 

Most advantageously, the encoding zone defines at 
least four and preferably at least six consecutive value 
units. However, this number should not be taken as 
being limiting. It may depend on the number of value 
words associated with the least significant value units. 
As explained below, it is possible to obtain an auxiliary 
value unit equal to one half of the basic value unit by 
consuming value bits that have already been established 
in the card. It is also shown that it is possible to associate 
a plurality of value words with the same value unit. 
Finally, it is possible to provide a plurality of sets of 
values operating as indicated above on the basis of dif- 
ferent base values, either with or without overlap. 

Preferably, each value word contains a coding sub- 
zone defming the value unit which is associated there- 
with. In other words, the above-specified coding zone is 
constituted by the set of coding subzones incorporated 
in the various value words. 

However, it is possible for the coding zone to be 
separate from the words, and for it to define their re- 
spective value units by pointing to them, or by any 
other method of designation such as direct association 
of memory addresses with multiples of the base value 
unit which thai becomes the only parameter that needs 
writing in the memory. 

The invention also provides that in the absence of bits 
for certain value units, such bits may be regenerated by 
consuming bits of greater value. Various ways in which 
such "automatic change giving" can be implemented 
are described below. 

The invention also provides a way of loading a card 
with any desired sum defined by the user. A full set of 
value words with all of their bits valid is initially cre- 
ated. Then in order to match the value preloaded into 
the card to the desired sum, a sum equal to the differ- 
ence between the maximum value of the card and said 
desired sum is consumed immediately by writing. 

Provision is also made for reloading the card by a 
desired sum before all of the value bits in the card have 
been consumed. At least for EPROM technology cards, 
this reloading mode consists in creating at least one 
value word too many (in theory, this word is amongst 
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the most agnificant words), with a sum equal to the 
excess amount being consumed immediately by writing. 

In a particularly advantageous embodiment, each 
value word possesses an integer number of 8-bit bytes, 
and preferably 32 bits, which are used as follows: two 
reserved bits; twenty-five value bits; four bits for defin- 
ing the value unit associated with the word; and one 
- validation bit. The validation bit confirms that the sum 
specified by the value word has indeed been prepaid 
and certified by the organization which guarantees 
payment. Such validation need not necessarily be incor- 
porated in each value word. 

Although the calculation means required for imple- 
menting the method can, at least in part, be located in 
the terminal, it is considered to be particularly advanta- 
geous for these calculation means to be located entirely 
in the card. 

Although a loading technique based on the same 
principle as is used for debit operations has turned out to 
be most advantageous. It may be desirable to have a 20 
mechanism available for "giving change", i.e., for con- 
verting one or more bits corresponding to high value 
units into a larger number of bits corresponding to 
lower value units, whenever there is a shortage of such 
bits. 

In this respect, a variant of the invention proposes a 
different technique enabling the use of the card as an 
electronic purse to be generalized and extended simulta- 
neously to other applications, while simplifying its oper- 
ation in a substantial manner. 

In a highly advantageous variant of the invention, the 
transaction system further includes treatment means for 
preloading the card with a desired sum expressed in 
common monetary units and certified, and means suit- 



25 



30 



FIG. 3 is a diagram illustrating the interaction, in 
accordance with the invention, between the coding 
zone and the value words; 

FIG. 4 illustrates the structure of an electronic purse 
in accordance with a preferred embodiment of the pres- 
ent invention; 

FIG. 5 shows an example of a practical implementa- 
tion of an electronic purse in accordance with the in- 
vention, and FIG. 5A shows a variant thereof; 

FIG. 6 illustrates one example of how the FIG. 5 
electronic purse can be initially loaded; 

FIG. 6A shows four different transactions possible 
with the FIG. 6 electronic purse; 

FIG. 7 is a flowchart of a mechanism for regenerating 
value bits in a purse of the invention; 

FIG. 8 shows various conditions applicable to reload- 
ing the electronic purse of the invention with value 
units, and FIG. 8A compares two of these situations; 
and 

FIGS. 9 and 9A show two other embodiments of an 
electronic purse in accordance with the invention. 

DETAILED DESCRIPTION 

The accompanying drawings are, for the most part, 
definitive in nature. They therefore form an integral 
portion of the description and may be used not only for 
facilitating understanding thereof, but also, where ap- 
propriate, for contributing to the definition of the inven- 
tion. 

In FIG. 1» a terminal 1 provided with processing and 
calculating means 12 is in interaction with a card 2 
possessing a microprocessor 21 controlling a memory 
20, e.g., of the erasable programmable read only mem- 
ory (EPROM) type. It could be constituted by a two- 



able for verifying that the cumulative value of debits 35 chip card, but it is currentiy preferred for the memory 



expressed in the same value units remains no greater 
than the sum preloaded in this way. 

Thus, already-existing certification and security tech- 
niques can be used for loading a sum into the card with 
the sum being expressed, for example, in francs. Only 40 
the amount of one or more debits will be expressed in 
the value units of the "purse", and the total of debits 
already performed in this way is verified to be no 
greater than the certified monetary amount available in 
the card. *5 

In theory, value bits would only be created to be 
available for debit purposes insofar as the total of the 
available value bits does not exceed the sum preloaded 
into the card. 



and the microprocessor to be integrated on the same 
chip. 

In FIG. 2, a terminal 11 provided with processing and 
calculation means 112 is coupled with a card 22 pro- 
vided with a hard-wired logic circuit 221 controlling a 
memory 220 on the same chip. 

The memory may be of the electrically erasable pro- 
grammable read only memory (EEPROM) type, some- 
times also written EEPROM. 

This is one of the main types of card currently avail- 
able on the market. 

More generally, a card of the invention includes a 
permanent write memory (which is renewable if EE- 
PROM technology is used). The term "permanent 



Further, a scale of value words can be. created as a 50 write" is used herein to mean that writing into the mem- 



function of the order of magnitude of the amount of a 
transaction to be performedi 

Instead of giving change in a given value unit for 
which there is a shortage of value bits, the value word 
corresponding to said value unit can merely be regener- 55 
ated, providing the preloaded sum includes sufficient 
credit 

Even more simply, all of the remaining value bits can 
be cancelled and one or more new scales of value words 
can be created. 60 

BRIEF DESCRIPTION OF THE DRAWINGS 

Embodiments of the invention are described by way 
of example with reference to the accompanying draw- 
ings, in which: 65 

FIGS. 1 and 2 show two different embodiments of a 
transaction system suitable for implementing the inven- 
tion; 



ory is considerably more difficult than reading it, and 
that the memory is nonvolatile. 

Memories wltich are usable in the invention are elec- 
trically programmable read only memories for which 
the electrically controlled programming operation cor- 
responds to permanent writing as defined above. In a 
prepaid card, nonwritten bits have corresponding value 
units attributed thereto, and these units are consumed 
by writing to the bit 

Reprogramming a card assumes that it is possible to 
erase its memory. Only EEPROM memories are electri- 
cally erasable. EPROM technology memories can be 
erased only by other means, e.g., by exposure to ultravi- 
olet radiation. Cards which incorporate EPROM mem- 
ories are constructed in such a way as to prevent era- 
sure taking place. 

In this respect, the safety measures which are consid- 
ered as ensuring the integrity of chips inside the card 
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and the techniques for monitoring proper use of the 
memory as a whole arc considered as being known to 
the person skilled in the art. 

In accordance with the invention (FIG. 3) the mem- 
ory (20 or 220) contains a coding zone 252 for coding a 5 
sequence of value units which are spaced apart at suc- 
cessive powers of 2, starting from a base value, together 
with a plurality of value words 251 each of which is 
associated with one of the value units and each of which 
contains a predetermined number of value bits each 10 
possessing said value unit 

FIG. 4 shows value words MVl to MVS together 
with an optional word MVO whose function is de- 
scribed below. 

In a particular embodiment of the invention, each 15 
word occupies 32 bits. The structure of the word MVl 
is described by way of example; it comprises: 

two system bits 250-1 reserved for monitoring appli- 
cations, for example; 

twenty-five value bits 251-1; 20 

four value unit bits 252-1; and 

one validation bit 253-1. 

The four value unit bits can be used to encode up to 
16 different value levels. In the present version of the 
invention, it is considered that eight different value 25 
levels suffice, at least for the basic version of the elec- 
tronic purse. 

Depending on whether,, each of the twenty-five 
value bits is in the blank or nonwritten state (which state 
is conventionally called "zero"), or in the written state, 30 
called "1", it has the value dcfmed by the zone 252-1, 
which for the word MVl under consideration consti- 
tutes the "base value" of the electronic purse. 

Validation is performed by causing the bit 253-1 to be 
written to the "1" state after it has been confirmed 35 
(under conditions defined above) that the value bits 
have indeed been loaded with the associated value unit 
It may be observed that the validation bit 253-1 could be 
made using a different technology enabling a write 
operation to be made even more irreversible, e.g., by 40 
using fuses incorporated in the chip. 

In a variant of the above, instead of incorporating the 
value unit 252 in each value word, they could all be 
defined in a coding zone 252 placed in an entirely sepa- 
rate location in the memory. In this case, the value of 45 
the bits in each value word is defined by correspon- 
dence between the value word and a point in the coding 
zone, with such a function being performed, for exam- 
ple, by means of pointers or by any other addressing 
system, be it direct, indirect, or implicit The same ap- 50 
plies to the validation bit. 

The capabilities of an electronic purse of the inven- 
tion will be better understood from the example shown 
in FIG. 5. The value word of rank 1 corresponds to the 
base value unit (code UV=0001), which corresponds, 55 
for example, to 0.10 of a monetary unit, such as the 
franc. Up to twenty-five bits of this value unit may be 
loaded, corresponding to a maximum value of 2.5 
francs. The word of rank 2 has the code UV=0010, for 
a value unit of 0.20, which gives 5 francs on twenty-five 60 
bits. Continuing in the same manner, the word of rank 8 
has a unit value code of 1000 giving a unit value of 12.80 
francs, and a maximum value of 320 francs. 

Using a single value word per value level, the maxi- 
mum value of the electronic purse defined in this way is 65 
637.50 francs. 

FIG. 5A shows a variant in which a value word of 
rank 9 is also used having a unit value of 25.6 francs for 
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a maximum value of 640 francs for this word, thereby 
raising the value of the electronic purse as a whole to 
12T7.50 francs. 

It will be seen in FIGS. 5 and 5A that the optional 
code word O can be used for splitting up value bits of 
greater significance into value units equal to one half of 
the base value (code 1), Le., down to 0.05 francs. At 
present, initial loading of this value word of code O is 
considered unnecessary. 

It is now assumed that a value of 400 francs is to be 
loaded into a card which is completely blank, i.e., 
which has had no value loaded therein previously. This 
is described with reference to FIG. 6. 

The card used is the electronic purse shown in FIG. 
5, i.e.^ in which neither the value word of rank 9 nor the 
word of rank O are used, a priori. 

Since the value to be insened in the card is 400 francs 
and its maximum value is 637.50 francs, the difference is 
237.30 francs. When divided by the base value unit 
UVB, this difference corresponds to 2375 units, which 
in binary gives: 

lOOIO 10001 u 

In order to load the card, all of the value words of 
ranks 1 to 9 are initially filled completely. Then, the 
binary value mentioned above is written in from right to 
left. Each time that a 1 bit is encountered, a value bit in 
the value word of corresponding rank is consumed by 
being written to. For example, in the case shown in 
FIG. 6, a value bit is consumed in each of value words 
MVl, MV2, MV3, and MV7. 

The remainder of the binary value expressed above 
corresponds to 18 units of the value word of rank 8, and 
thus 18 bits in this word are consumed. 

After this has been done, the validation bits 253 in 
each of the value words are confirmed. 

The invention provides a particularly simple and 
elegant means for loading a value into an electronic 
purse while ensuring that a very large number of value 
bits remain available at each of the levels or value 
words implemented in the electronic purse. 

Thereafter, transactions can be performed as shown 
in FIG. 6A. A ten franc ptirchase corresponds to 100 
times the base value, unit The number 100 is written in 
binary and FIG. 6A shows that a value bit should be 
consumed in each of the words MVS, MV6, and MV7. 
FIG. 6A contains three other examples, for transactions 
of 15.5 F, 25.9 F, and 49.9 F, respectively. 

The above description is equally applicable to cards 
having EPROM and E^PROM type memories, regard- 
less of whether access is controlled by hard-wired logic 
circuits or by microprocessor. 

The above-described example is based on the fact that 
most transactions in France are currently expressed to a 
round number of 10 centimes, even though the smallest 
value coin currently in circulation is worth only 5 cen- 
times. 

Should it be necessary to make use of value word 
MVO in which each bit is worth 5 centimes, this can be 
done in the form of twenty-four bits giving an overall 
value of 1.2 francs by consuming one value bit from 
word MV3 and one value bit from word MV4. Here 
again, it is initially assumed that there are twenty-five 
value bits in the word MVO, and one of these bits is 
immediately consumed in order to bring the number 
down to twenty-four» whereupon the vaHdation bit 
253-C of the word MVO is confirmed. This may be 
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performed by the microprocessor 21, or by cooperation of rank UV5 is created in return for three value bits of 

between the hard-wired logic 221 and a secure terminal. rank UV8. 

After loading 400 francs as described with reference Otherwise, if value bits remain in rank UV6, it is 

to FIG. 6, at least twenty-four bits are available in each preferable to create a word having twenty value bits of 

of value words MVl to MV7, and nine bits are available 5 rank UV4 in return for one value bit of rank UV8, and 

in value word MVS. one value bit of rank UV6. 

Regardless of the value of any purchase, this means Fmally, if there remains no more than one value bit of 

that at least twenty-four transactions can be guaranteed, rank UV8, then nothing is done since it is then not 

so long as the total value of the purchases does not appropriate to consume this value bit. 

exceed the total amount originally loaded into the card. 10 Overall, value units arc changed automatically fol- 

A nonnegligible advantage of the invention is that lowing the above-specified mechanism except insofar 

each transaction or purchase can be performed without as: 

giving change while consuming no more than one value for value units of less significance, more than half of 

bit for each value unit, other than bits of the highest the value bits of the next lower rank are present; 

value unit. 15 and 

If account is taken of the fact that, in practice, the for value units of greater significance, the number of 

value of a given purchase or transaction when ex- even greater value units remaining is not enough to 

pressed in binary has equal chances of giving rise to enable an automatic change operation to take 

zero bits and one bits, then the number of possible trans- place. 

actions may well be higher. 20 When using an E^PROM card, its value words are 

However, there is no guarantee that any particular advantageously reconfigured in optimum manner, since 

sequence of transactions performed by a particular user they can be erased electrically. The operation is then 

will satisfy this statistical norm. similar to reloading as described below, except that the 

The invention therefore also provides for internal total value is not changed, 

means for regenerating value words that arc prcma- 25 The reloading of a card in accordance with the in ven- 

turely emptied by taking value from words which are tion with value units is now described with reference to 

not yet emptied. This is a kind of "automatic value unit FIG. 8. 

change giving" operation which does not alter the value The above-described automatic change giving pro- 
contained in the card (unlike "reloading" as described cess does not necessarily require a terminal to be present 
below). 30 (unless the calculation means incorporated in the card 
The basic situation is one where the total residual are insufficient to enable the card to perform the work 
value in the card has not been expended, but the word on its own). However, both the initial loading of the 
or words associated with a given value unit are spent card with value units and the reloading thereof with 
out. This happens after at least twenty-four transactions value units require cooperation between the card and 
have been performed, assuming that the initial loading 33 the terminal. 

was as described with reference to FIG. 6. When using an E2PROM technology memory, re- 

As a general rule, a word having twenty-four value loading is similar to initial loading: the residual value of 

bits of value unit of rank I can be revalidated by con- the card is added to the value to be transferred thereto 

suming one value bit whose value unit is of rank lH-3, (as appropriately ccnificd). After the memory has been 

together with one value bit whose value unit is of rank 40 erased, it can be completely reconfigured in the same 

1 4. 4. way as during initial loading, described above. 

FIG. 7 shows a preferred implementation of this Such erasure is not possible using an EPROM tech- 

mechanism. nology memory. The following description relates to 

The starting point is the observation that value unit various other methods, which are applicable to both 

UVi is empty. 45 technologies. 

If the value unit concerned is of rank 1, then the Firstly, reloading can be considered as being a kind of 

mechanism explained below is always applied. initial loading operating in the manner described above; 

Otherwise, if it is a value unit of greater significance, and new value words can be added which are disjointed 

in this case UV2 to UV4, a search is made initially to see from the existing value words, 

whether the number of bits remaining on the value unit 50 Advantageously, this initial loading type of mecha- 

of next smaller rank is less than thirteen (i.e., equal to nism may be replaced by generating value bits in levels 

not more than half of twenty-four). If more than half the 8, 7 and/or 6. by looking for the nearest higher value 

points remain in the next smaller value unit, it is simpler which makes it possible to obtain a maximum number of 

to consume two bits of this next smaller value unit generated value bits while minimizing the number of 

rather than one bit of the missing value. 55 validated value words. The reloaded amount is adjusted 

Otherwise the mechanism described below is applied. to match the desired sum by debiting the difference 

For value units of even higher significance, automatic between the value of the validated word or words and 

change is given only if performing such an operation the value of the reloading amount, 

does not involve using bits of the highest value or . The debit is performed in the same way as a payment 

greater. 60 transaction. 

In the example of FIG. 7, nothing is done for value The reloading value is chosen by the cardholder, and 

units UV6, UV7, and UV8- it may lie, for example, in the range 30 francs to 600 

However, for value unit UV5, a check is made ini- francs when using the FIG. 5 electronic purse, 

tially to verify that there remain more than three value FIG. 8 summarizes the optimum reloading means as a 

bits in level UV8. This is a necessary condition to be 65 function of the range in which the selected reloading 

able to regenerate value units at level UV5. If this con- value is to be found. In this respect, since the value to be 

dition is satisfied, a test is also made to see whether rank reinserted increases going down FIG. 8, this figure thus 

UV6 is empty. If it is, a word of twenty-four value units defines a sequence of possible reloading value ranges. 
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If the value to be reloaded is not greater than 40 In this case, it is assumed that transactions expressed 
francs, then a word is validated comprising twenty-five in centimes are rare and the imii under consideration is 
value bits at level S (for 40 francs), and then the appro- closer to one franc. In this case, the base value unit is 
priate number of bits is consumed to reduce the re- 0.30 francs. By loading levels 1 through 8 with twenty- 
loaded value to the desired amount, and the validation 5 five value bits each, this gives a total value to the purse 
bit is then, naturally, confirmed (this operation is always ^"^^"f?;. . . ^ ^ ^ i. • ■ 
performed when a value word is created, but it is not The person skilled in the art will understand that it is 
mentioned every time in the description below). possible to have more than one value word per value 

The same technique is applied if the amount to be unit level. This is shown in FIG, 9A usmg the same 

loaded lies between 40 and 80. but this thne using 10 °[ IJ^^ ^ fi^; ^^^^ 

twenty-five value bits of level UV6. value words for unit UVl. three for "n^t Uy2 tM.o 

Exactly the same procedure could be applied if the for unit UV3 and one each for v^^^^ 

value to be reloaded lies in the range 80 to 160. using The total value of the card is 900 francs. . 

vttiuc ^ ° ei,««r« in Pin « As alrcady menuoned, the mvention is particularly 

v^aue bits 15. appUcable to Ae card of FIG. 1 since this caVd includes 

ill tf^a^'^^^^^^^ ^ rvf r ^^sVr'ai f eternal microprocessor capable of pc^o^ing a^^^^^ 

levelUV^remainitispreferredtolo^ ^SrofS^^ 

at these levels, rather than to load a single word a level ^ ^ ^ automatically. In this 
UV7. However, this IS an option which IS not stricUy 

necessary for performing the present mvention cardholder's credit for an amount to be loaded. 

The remainder of the t^le is to be read m the same ^^^^ ^ validation will itself comprise a certifi- 

way. up to a level of 320 francs. The abovc-nientjoned ^^^^ enabling the card to authenticate the organization 

opdon with respect to level 120 also exists for levels 200 ^^^.^^^ guarantee the monetary values loaded imo 

and 240. 25 the card, and this may require a confidential code to be 

Beyond 320. it is currently considered preferable to presented. In contrast, all of the transaction operations 

look for the minimum number of value words that can including automatic giving of change can be performed 

be loaded, and then to combine value units which satisfy -^^^^^ without any need to verify the confiden- 

this condition while giving more weight to smaUer ^^^^ without any need to take other security 

value units. In the example described, for amounts precautions. 

greater than 320 francs, the following arc loaded: ^gjj ^^^^ ^ piG. 2 card, at least with current tech- 
value bits UV5 and UV8 if the amount is not greater nology. some of the functions required for loading and- 
than 360; /or reloading words are not necessarily capable of 
value bits UV6 and UV8 if the amount is not greater performed within the card itself. In which case 
than 400; 35 the calculating means 112 in the terminal may be called 
value bits UV7 and UV8 if the amount is not greater qjj fQr assistance. The same may apply to automatic 
than 480; • change giving. Naturally, it will be understood that the 
value bits UVS. UV7. and UV8 if the amount is not ^j^rd may cooperate with two different types of tcrmi- 
greatcr than 520; iials. One type is highly secure and installed, for exam- 
value bits UV6, UV7. and UV8 if the amount is not ^ pig^ banks and is equipped to load or reload a card 
greater than 560. and (and also to take part in automatic change giving, if 
value bits UVS, UV6. UV7, and UVS if the amount is necessafy). whereas terminals of the other type are 
not greater than 600. located on commercial premises or on any other loca- 
FIG. 8 A shows up the advantage of using intermedi- tion where simple transactions may be performed, and 
ate levels such as level 200 as shown in FIG. 8. 45 these terminals serve only to accept a transaction in 
Assume that the state of the electronic purse prior to exchange for value bits being consumed in the card, 
reloading is as shown in the first line of numbers in FIG. without special security precautions being taken. 
. 8A, giving a total value of 1 55.90 francs. It is specified above that it is not essential for a confi- 
In the first case, 200 francs arc loaded in the form of dential code to be presented in order to enable an elec- 
twenty-five value units in rank UVS and also in rank 50 tronic purse to be used. However, presentation of a 
UV7. The card now has more-*'change'*. code may be envisaged. 

In the second case, sixteen value units of rank UVS This applies, in particular, when an electronic purse 

are loaded and one value unit is consumed in each of becomes an electronic wallet, i.e., when it is worth a 

ranks UVS and UV6. These levels which were already greater amount. 

fairly well stocked are not excessively penalized. The 55 For example, an electronic wallet could be consti- 

cardholder will have fewer problems with high value tuted having the following characteristics: 

transactions since a large number of bits of rank UVS a value unit 1001 for bits having a value of 50 francs 

remain to be consumed, each; 

However, in most applications, it will be unusual to a value unit 1010 for bits having a value of 100 francs 

use an electronic purse for transactions for amounts 60 each; 

close to the maximum value. That is why the first proce- a value unit 1011 for bits having a value of 200 francs 

dure Oine marked (A)) in FIG. 8A seems preferable, each; and 

even if it requires two words to be validated. a value unit 1100 for bits having a value of 400 francs 

This example shows the advantage of the conditional each, 

splits appearing at levels 120, 200. and 240, in FIG. 8. 65 On this basis, the following additional value levels 

Another application of an electronic purse of the may also be provided: 

invention is now described with reference to FIGS. 9 1000 for bits having a value of 25 francs each; and 

9;^ 1101 for bits having a value of 800 francs each. 
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In this respect, it may be observed that one of the bits There follows an example for improving understand- 

provided for encoding the value unit is unnecessary, ing of the variant of the invention relating to loading a 

since three working bits suffice for encoding up to eight microcircuit card. 

different levels of value unit The founh bit may be used Using known and conventional techniques for chip 

for identifying the card of the invention as a purse or as 5 cards, a card may be loaded with the sum of 800 francs, 

a wallet, as the case may be. example, and certified using conventional means 

Naturally, the present invention is not limited to the that need not be explained herein, 

embodiment described. The person skiUed in the art ^ Simultaneously, an electronic purse can be created as 

may extend it in various different ways. ^ ^^'^ ? 

In particular, a single card may have a plurality of FIG. 5 The totol value of the value bits is 637.50 francs. 

memo^z^nes ix^existing therein each defining an elec J^*^ -f^ ^ '^^^ P^^1°^^<1 
tronic purse for a particular ^8^^^^^. "-^J ^ could equally well have been preloaded 

amounts, and/or an dectromc wallet satisfymg the francTand verification could have been 

same conamons. performed with each debit that the total amount of the 

When the card conteins a very low residual value P^^.^ performed so far does not exceed the originally- 

which IS unhkely to suffice for any transaction, it may i^^ed 500 francs, even when the maximum amount of 

be reimbursed m conventional bank notes and com, ^^^.^ electronic purse can carry may be as 

after implementing appropriate secunty procedures, ^^^j^ ^ ^37 53 ^^^^ ^^^^^ ^ ^^^^ ^^an 500 francs, 

such as presenting a confidential code. 30 When all of the value bits of rank 1 have been con- 

A card may also be restricted to transactions with one naturally possible to completely reconstitute 

suppUer only, in which case the supplier may be identi- ^ ^^^g ^^j^j ^^nk 1 (with reference to FIG. 5), pro- 

fied in the card in a secure manner. yjjed there remains sufficient value of the sum pre- 

In practice, it will be more frequent that a card has an loaded into the card. However, it is also possible to 

expiration date which is specified, and the number of 23 completely reset the scale of value words after deduct- 

times a card may be reloaded may be fixed in advance, i^g the total amount of consumed value bits from the 

for example. This data may be fixed when the card is preloaded sum. 

first issued. The same precautions should be taken as in the 

The monetary unit value may be encoded in the mem- above-described system, Le., each operation of writing 

ory using a two's complement mode, or any other 30 to a bit should necessarily correspond to a certain 

means ensuring that any change in the code as written amount of money being consumed, and not vice versa, 

can only have the effect of reducing the monetary value and this should take account of the operating logic of 

of a unit. the microprocessor. 

During a transaction, after value bits corresponding When it is desired to reload a card fully as a "purse", 

to the debit to be performed have been consumed, the 35 it suffices merely to calculate the total amount of debits 

microprocessor card may send a transaction certificate performed in its "purse" zone, to subtract this sum from 

to the trader's terminal which may be executed by the previously preloaded sum, and optionally to add 

means of the calculation function in the card, e.g.. mak- additional preloaded sums or provisions to the results, 

ing use of a protected and diversified secret key in the The total is then written as a new preloaded sum and. as 

AO before, this makes it possible to set up a "purse" zone 

In at least some applications, the card will be authen- with spaced apart value units as described above, 

ticated by the (debit) terminal and/or the (debit) termi- The card is thus provided with a "credit zone of 

nal will be authenticated by the card. Authentication is conventtonal structure together with a debit zone 

always performed with high security terminals. ^^"^^ ^« ^^tructure described above. The advantage of 

vLi^ cipher methods are available for performing ^5 proc^mg these two zon^ separately also lies m the 

the above-mentioned security functions. ^r^TlVl^^^^^ 

Finally, the terminal may contain a "black" list of procedures to each of them. 

ruioiijr, isiuiuio* '"J A greater degree of secunty should be attached to 

cards not to be accepted, as is already done for bank ^^^^^ ^ ^ ^,^,1,^ writing 

^ „ ^' . ,^ J . i_ • ^ 50 a debit bit can only reduce the value of the card. 

Further, variants may be design^ m the basic struc- ^^^^^ advantage of the variant of the invention 

ture of the electromc purse, dependmg on applications. ^^j^^^ ^ microcircuit card, lies in the value 

For example, if the base value umt is 0.5 francs, ten p^ioaded into the card serving not only as a source for 

value words each havmg 16 bits may be provided, usmg replenishing the electronic purse, of the invention, but 

two words for each of the values: 0.5 francs; 1 franc; 2 55 ^ payment for other types of transactions, all 

francs; and 4 francs; and one word for each of the val- housed in a single card. 

ucs: 8 francs; and 16 francs. In this case, each 16-bit Naturally, the variant of the invention relating to 

word contains 16 value bits and the associated value is loading a microcircuit card may also include all of the 

defmed merely by a memory address. other variants described above. 

"Validation" processing docs not make use of a vaU- 50 in particular, the processmg and calculating means 

dation bit in each value word, in this case. Validation is mentioned above may be located, in part, in the termi- 

determined by the address of the first value word, by nal, or else they may be completely located in the card, 

the number of value words, and by their respective I claim: 

values, all of which can be defmed implicitiy. l. A traiisaction system of the type comprising at least 
Finally, cards of the invention can be used for any 65 one terminal and a microcircuit card suitable for coop- 
monetary unit They have the advantage of making it erating with the terminal, said card including a perma- 
possible to perform processing using the European cur- nent write memory having at least some of its bits asso 
rency unit, or "ECU". dated with corresponding value tmits, said memory 
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bdng consumable by writing, wherein the memory 
contains a coding zone for defining at least one base 
value from which a sequence of value units can be es- 
tablished, said- value units being spaced apart at succes- 
sive powers of 2, together with a plurality of value 5 
words each associated with one of the value units, and 
each containing a predetermined number of value bits 
each possessing a value equal to said value unit, and 
wherein the system includes calculation means suitable 
for splitting up a monetary amount into binary notation 10 
on the basis of said base value, and for issuing com- 
mands to write or not to write a value bit in each of said 
value words as a function of the bit of corresponding 
significance in said binary notation, and for writing any 
remaining more significant bits most significant value 13 
word. 

2. A system according to claim 1, wherein the coding 
zone defines at least four value units. 

3. A system according to claim 1, wherein each word 
contains a coding subzone defining the value unit which 20 
is associated therewith, the above-mentioned coding 
zone comprising in said coding subzones taken together. 

4. A system according to claim 1, wherein the coding 
zone is distinct from the words, with the value units of 
the words being defined by pointers to the words or by 25 
their addresses. 

5. A system according to claim 1. wherein the coding 
zone is adapted for defining a value of one half the base 
value, together with a corresponding value word, 
which can be validated by consuming value units of 30 
more significance. 

6. A system according to claim 1, wherein in the 
absence of value bits for the base value unit, the calcula- 
tion means are responsive thereto for regenerating a 
value word corresponding to said value unit in return 35 
for writing to a value bit in at least one of the more 
significant value units. 

7. A system according to claim 1. wherein in the 
absence of value bits for a less significant value unit, and 
when the number of value units of the next smaller 40 
significance falls below a predetermined threshold, the 
calculation means are responsive thereto regenerating a 
value word corresponding to said value unit in re-turn 
for writing to a value bit in at least one value imit of 
greater significance. 45 

8. A system according to claim 1, wherein in the 
absence of value bits for a value unit of high significance 
and for the value unit of the next greater significance, 
and when the number of maximum significance value 
units is greater than a predetermined threshold, the 50 
calculation means are responsive thereto for rcgenerat- 
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ing a value word corresponding to said value unit in 
return for writing to a bit in at least one value unit of 
greater significance. 

9. A system according to claim 1, wherein it possesses 
a mode for loading the card with a desired sum, in 
which mode the calculation means is adapted for creat- 
ing and loading a set of said value words having all of 
their bits valid, and then immediately consuming a sum 
equal to the difference between the maximum value of 
the card and said desired sum by writing to appropriate 
bits. 

10. A system according to claim 1, wherein it pos- 
sesses a mode for reloading the card by a desired sum, in 
which mode the calculation means is adapted for creat- 
ing and loading at least one excess value word of the 
greatest significance, and immediately consuming a sum 
equal to the excess by writing. 

11. A system according to claim 10, wherein the 
value word created is selected as a function of the rela- 
tionship between said desired sum and the maximum 
value of each word. 

12. A system according to claim 11, wherein each 
created v^ue word is also selected as a function of the 
relationship between the desired sum and the sum of the 
maximum values of a plurality of words associated with 
different value units, and as a function of the number of 
value bits remaining for these value units. 

13. A system according to claim 1, wherein each 
value word possesses an integer number of 8-bit bytes. 

14. A system according to claim 1, wherein the calcu- 
lation means are entirely located in the card. 

15. A system according to claim 1, wherein the calcu- 
lation means are at least partially located in the termi- 
nal. 

16. A transaction system according to claim 1, further 
including processing means for preloading the card 
with a desired sum expressed in ordinary monetary units 
and certified, and means for verifying that the total 
value of the debits in said value unit remains not greater 
than the sum preloaded simi. 

17. A system according to claim 16, wherein in the 
absence of value bits for a given value unit, the process- 
ing means are responsive thereto for or regenerating the 
value word corresponding to said value unit so long as 
said preloaded sum continues to contain not less than 
the value thereof. 

18. A system according to claim 16, including means 

for deducting the total value of consumed value bits 

from the preloaded sum. 

'»•**« 
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On the title page : 

Abstract, line 9, change "meory" to — memory — . 



column 1, line 38, after "need" insert — for ~. 
column 8, line 36, change "E2PR0M" to ~ E^PROM — . 
Column 9, line 44, after "shows" delete "up". 
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Column 13, line 21, before "coding" delete 
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Column 13, line 43, change "re-turn" to — return ~. 
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Attesting Officer Acting Commissioner (^Patents anJ Trademarks 



01/15/2004, EAST Version: 1.4.1 



